DVA-C02 · Question #24
A developer is creating an AWS Lambda function that needs credentials to connect to an Amazon RDS for MySQL database. An Amazon S3 bucket currently stores the credentials. The developer needs to impro
The correct answer is C. Store the credentials in AWS Secrets Manager. Set the secret type to Credentials for Amazon. https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/create_database_secret.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets_lambda.html
Question
A developer is creating an AWS Lambda function that needs credentials to connect to an Amazon RDS for MySQL database. An Amazon S3 bucket currently stores the credentials. The developer needs to improve the existing solution by implementing credential rotation and secure storage. The developer also needs to provide integration with the Lambda function. Which solution should the developer use to store and retrieve the credentials with the LEAST management overhead?
Options
- AStore the credentials in AWS Systems Manager Parameter Store. Select the database that the
- BEncrypt the credentials with the default AWS Key Management Service (AWS KMS) key. Store
- CStore the credentials in AWS Secrets Manager. Set the secret type to Credentials for Amazon
- DEncrypt the credentials by using AWS Key Management Service (AWS KMS). Store the
How the community answered
(28 responses)- A7% (2)
- B4% (1)
- C86% (24)
- D4% (1)
Explanation
https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/create_database_secret.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets_lambda.html
Community Discussion
No community discussion yet for this question.